Configuring Secure Mac Addresses; Configuration Prerequisites; Configuration Procedure; Ignoring Authorization Information From The Server - 3Com 4500G Family Configuration Manual

Configuring Secure MAC Addresses

Secure MAC addresses are special MAC addresses. They never age out or get lost if saved before the
device restarts. One secure MAC address can be added to only one port in the same VLAN. Thus, you
can bind a MAC address to one port in the same VLAN.
Secure MAC addresses can be:
Learned by a port working in autoLearn mode.
Manually configured through the command line interface (CLI) or management information base
(MIB).
When the maximum number of secure MAC addresses is reached, no more can be added. The port
allows only the packets with the source MAC address being the secure MAC address.

Configuration Prerequisites

Enable port security
Set the maximum number of secure MAC addresses allowed on the port
Set the port security mode to autoLearn

Configuration Procedure

Follow these steps to configure a secure MAC address:
To do...
Enter system view
Configure a
secure MAC
address
The configured secure MAC addresses are saved in the configuration file and will not get lost when the
port goes up or goes down. After you save the configuration file, the secure MAC address saved in the
configuration file are maintained even after the device restarts.

Ignoring Authorization Information from the Server

After an 802.1X user or MAC authenticated user passes RADIUS authentication, the RADIUS server
delivers the authorization information to the device. You can configure a port to ignore the authorization
information from the RADIUS server.
Follow these steps to configure a port to ignore the authorization information from the RADIUS server:
To do...
Enter system view
Enter Ethernet port view
system-view
port-security mac-address security
In system view
mac-address interface interface-type
interface-number vlan vlan-id
interface interface-type interface-number
In interface
port-security mac-address security
view
mac-address vlan vlan-id
system-view
interface interface-type
Use the command...
Use the command...
1-10
Remarks
—
Required
Use either approach
No secure MAC address
is configured by default.
Remarks
—
—